Privacy Notice

1. Introduction

This Privacy Notice explains how personal data is collected, used, stored, and shared when you participate in the Power Up Haringey Home Energy Efficiency Grant Scheme (“the Scheme”).

The Scheme is delivered jointly by RetrofitWorks Ltd and the London Borough of Haringey, who act as Joint Data Controllers for certain processing activities relating to programme delivery, grant administration, eligibility assessment, and reporting.

RetrofitWorks acts as the primary contact point for all data protection enquiries relating to the Scheme.

2. Who is responsible for your data (Joint Data Controllers)

For the purposes of the Scheme:

• RetrofitWorks Ltd is responsible for customer registration, eligibility checks, installer coordination, technical surveys, installation oversight, and programme delivery.
• London Borough of Haringey is responsible for grant funding administration, application approval, programme oversight, and statutory reporting.

RetrofitWorks and the London Borough of Haringey have entered into a Joint Controller Arrangement in accordance with Article 26 UK GDPR, setting out their respective responsibilities for protecting personal data.

3. How the Scheme works (plain English)

To help explain how your data is used:

• RetrofitWorks performs eligibility verification and prepares the London Borough of Haringey (LBH) grant application on behalf of residents
• The London Borough of Haringey reviews and approves grant applications
• Grant funds are transferred to RetrofitWorks as managing agent for the purposes of programme administration
• RetrofitWorks coordinates technical surveys, installer delivery, quality assurance, and installation reporting
• Programme reporting and compliance monitoring are required for public-funding administration

4. What personal data we collect

We may collect and process the following categories of personal data:

• Name, address, email address, and telephone number
• Property ownership and property characteristics
• Energy performance data and technical survey information
• Eligibility information required for grant assessment
• Installation specifications and installation records
• Payment, grant and funding administration data
• Communications relating to your participation in the Scheme

5. How we use your personal data

Your personal data may be used to:

• Register you for the Scheme and administer participation
• Assess eligibility for grants and funding
• Prepare and submit grant applications on your behalf
• Arrange technical home surveys and installer appointments
• Coordinate installation works and quality assurance checks
• Administer deposits, payments, and grant deductions
• Monitor programme delivery, compliance, and funding reporting
• Prevent fraud or misuse of public funding
• Meet legal, contractual, and regulatory obligations

6. Lawful basis for processing

Personal data is processed under one or more of the following lawful bases:

• Performance of a task carried out in the public interest
• Compliance with legal obligations
• Performance of a contract or steps prior to entering a contract
• Legitimate interests in administering and improving the Scheme

Where eligibility or grant-related information requires additional protection, processing will be carried out in accordance with applicable UK GDPR provisions.

7. Sharing your information

Your personal data may be shared with:

• London Borough of Haringey, acting as Joint Data Controller, for grant eligibility verification, application approval, funding administration, compliance monitoring, and reporting
• Approved technical survey providers, installation contractors, and delivery partners involved in Scheme delivery
• Government departments, funding bodies, auditors, or regulators where required for compliance and reporting
• Professional advisers where legally required

All sharing is conducted under formal data-sharing agreements and appropriate security safeguards.

8. Data retention

Personal data will be retained only for as long as necessary to deliver the Scheme, administer public funding, meet statutory reporting requirements, and comply with legal obligations. Retention periods are determined in accordance with funding-body and regulatory requirements.

9. Your rights

Under UK data protection law, you have the right to:

• Request access to your personal data
• Request correction of inaccurate data
• Request erasure of data where appropriate
• Request restriction of processing
• Object to certain processing activities
• Lodge a complaint with the Information Commissioner’s Office (ICO)

10. Contact details (Primary Contact Point)

For all data protection enquiries relating to the Scheme, please contact:

Where appropriate, requests may be securely shared with the London Borough of Haringey to allow a full response.

11. Updates to this notice

This Privacy Notice may be updated periodically to reflect operational or legal changes. The latest version will always be available on the Scheme website.